node-saml vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20222
3. 20231
4. 20241
5. 20254

Newest CVEs

• CVE-2025-54369

  Node-SAML SAML Authentication Bypass

  node-saml · node-saml

  Critical9.3
• CVE-2025-54419

  Node-SAML Contains SAML Signature Verification Vulnerability

  node-saml · node-saml

  Critical10.0
• CVE-2025-29775

  xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

  node-saml · xml-crypto

  Critical9.3
• CVE-2025-29774

  xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References

  node-saml · xml-crypto

  Critical9.3
• CVE-2024-32962

  XML signature verification bypass due improper verification of signature / signature spoofing

  node-saml · xml-crypto

  Critical10.0
• CVE-2023-40178

  @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError

  node-saml · node-saml

  Medium5.3
• CVE-2022-39300

  Signature bypass via multiple root elements in node-SAML

  node-saml · node-saml

  High7.7
• CVE-2022-39299

  Signature bypass via multiple root elements in Passport-SAML

  node-saml · passport-saml

  High7.4
• CVE-2021-39171

  Unlimited transforms allowed for signed nodes

  node-saml · passport-saml

  Medium5.3